一个基于 MCP 协议的 Android 安全测试工具集。把它接入 Claude Code 后，你只需要说"帮我测这个 APK"，AI 就会自动完成解包、反编译、组件分析、代码扫描、动态 Hook，最后输出漏洞报告。 - imcfyulong/Android-MCP-v1.0.0

Network vulnerability scanner with Nmap integration, service banner grabbing, OS fingerprinting, and automatic CVE lookup via NIST NVD API. Generates HTML and JSON reports. - Moe1000-stack/network-...

PoC exploit for CVE-2025-55182 (React2Shell) — Pre-auth RCE in React Server Components | CVSS 10.0 - SentinelXofficial/CVE-2025-55182

Free dependency vulnerability scanner — scans full transitive tree for CVEs. Supports npm, PyPI, Maven. No signup. - sky2194/dependency-analyzer

The Faction Burp Suite Extension. Contribute to factionsecurity/Faction-Burp development by creating an account on GitHub.

codex自动渗透测试awvs top10漏洞skills. Contribute to houtuanwei/pentest-top10 development by creating an account on GitHub.

This is an end-to-end DevSecOps pipeline deploying a Netflix clone on AWS with Jenkins, SonarQube, Trivy, Prometheus, Grafana, and ArgoCD - qoonleyh/Devsecops-Netflix-Project

Grype is an open source vulnerability scanner for container images and filesystems developed by Anchore. It works with Syft-generated SBOMs and supports major OS package ecosystems and language-spe...

An archive of 0day.today exploits. Contribute to vulncheck-oss/0day.today.archive development by creating an account on GitHub.

Sliver C2 SeTcbPrivilege Exploitation Extension. Contribute to RajChowdhury240/SeTcbPrivilege-Sliver-C2-Extension development by creating an account on GitHub.

Full-stack static malware triage tool: upload a binary or password-protected ZIP, run a LangGraph ReAct agent over a suite of RE tools ▎ (PE/ELF/.NET/Office/PDF parsing, YARA, capa, FLOSS, entro...

Professional network vulnerability scanner using Nmap and Python with CVE lookup - ItsPiyushVishwakarma/Network-Vulnerability-Scanner

【Java计算机毕业设计分享】基于SSM的漏洞扫描器管理系统，MySQL Java开发 毕业设计 实战项目【附源码、文档报告、代码讲解】 - doomispawd/BBLLIBiJbK

This tool demonstrates CVE-2026-38194, a vulnerability in Teledyne Digital Imaging Sapera Memory Manager (v9.0.0.0 and below). The CORMEM.SYS kernel driver exposes IOCTLs without any access contro...

支持手动代码分析，内置 17+ 漏洞类型检测引擎。. Contribute to kabuqin/VulnAnalyzer development by creating an account on GitHub.

Distributed job scheduler in Go: gRPC scheduler/worker, PostgreSQL, leader-election HA, recurring cron jobs, dead-letter forensics, rate limiting, and security hardening (command allowlisting, SSRF...

SSRF-safe fetch for user-supplied URLs: scheme allowlist, resolve-all-IPs is_global check, and per-hop redirect re-validation. The guard I put in front of every server-side URL fetch. - kylemillerb...

C++ dependency vulnerability scanner (npm audit analog for CMake projects) - mpv7/mpv_cpp_npm_audit

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and maintain persistence. Browser extension, electron app, ...

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts) - LOLBAS-Project/LOLBAS